Risk warning. This is education and advisory only — not investment, legal or tax advice, and not a recommendation to buy, sell or hold anything. Crypto assets are volatile, largely unregulated in many markets, and transactions are irreversible. You can lose everything. Do your own research and take professional advice before acting.
Why scam-spotting is an operational skill, not a security afterthought
Most crypto losses we see among businesses aren't clever exploits. They're social. Someone rushed a transfer, trusted a screenshot, or accepted a token that looked exactly like the real thing. The chain did precisely what it was told — the human made the mistake.
If you move stablecoins for real reasons — paying a supplier in a hard-currency-scarce market, settling an OTC trade, funding operations across borders — you need the scam playbook the way a treasurer needs to know a forged invoice. Not because you're paranoid. Because the money doesn't come back.
Here's what the common frauds actually look like on the ground.
Flash USDT: the receipt that isn't
'Flash USDT' is the scam that catches otherwise-sharp people. A counterparty sends you what appears to be USDT. Your wallet shows a balance. There may even be a transaction hash you can paste into an explorer. It looks settled.
It isn't. The tokens are either a fake contract impersonating Tether, a transaction that will be dropped/reorged, or a display trick using a look-alike token with the same ticker. By the time it evaporates — or you realise it was never spendable — you've released goods or sent real funds the other way.
How to not get caught
- Verify the contract address, not the ticker. Anyone can deploy a token called USDT. Check the official Tether contract for that chain and confirm it matches exactly.
- Confirm finality, not just visibility. A pending or dropped transaction can appear in a wallet momentarily. Wait for confirmations on the actual, correct contract.
- Try to move a small amount out before you treat funds as yours. If you can't spend it, you don't have it.
- Never release value against a screenshot or a hash someone sent you. Look it up yourself, on a block explorer you typed into the browser.
Honeypot tokens: you can buy, but you can't sell
Honeypots are contracts engineered so that transfers or sells fail for everyone except the creator. You send real stablecoins in, receive the token, and then discover you can never sell it back. The 'liquidity' is a trap.
Operators usually meet these when a counterparty insists on settling in some bespoke token 'for efficiency', or a deal involves a project token you've never handled. The tell is any pressure to accept an asset you can't trivially convert back to a mainstream stablecoin or fiat.
Stick to well-established assets on established chains. If someone needs you to hold an obscure token to close a deal, that's a business problem to solve in contract terms — not by taking custody of something you can't exit.
Fake escrow and impersonated OTC desks
As deal sizes grow, so does the incentive to fake the intermediary. Classic patterns:
- A 'reputable escrow' that's actually a wallet controlled by the counterparty.
- An OTC desk lookalike with a near-identical domain and a plausible Telegram handle.
- A 'verification fee' or 'gas top-up' you must send first to unlock a larger release.
Any scenario where you pay a fee to receive money you're owed is a scam. Full stop.
For genuine OTC liquidity and fiat on/off-ramps, the disciplines are old-fashioned: known legal entity, verifiable banking or corporate details, a written agreement, a test transaction, and settlement in tranches for anything sizeable. If you're building cross-border payment flows and want them designed properly, that's exactly the kind of thing we work through on our crypto advisory engagements and with clients operating across multiple regions.
The counterparty vetting checklist
Before a single unit moves:
- Independent identity. Who is the legal entity? Can you verify it exists outside their own website?
- Address ownership proof. Ask them to sign a message from the receiving wallet, or send a nominal amount from it first.
- Small test transaction, always. Non-negotiable for a new relationship, at any size.
- Correct chain, correct contract. Confirm both sides agree on network and asset. Cross-chain confusion is a whole separate way to lose funds.
- No urgency-driven decisions. Manufactured time pressure is the single most reliable scam signal.
- Segregate the operational wallet. Don't run deal flow from cold storage or a treasury wallet.
Custody and keys: the boring part that saves you
Even perfect scam-spotting fails if your keys are exposed. Keep signing devices clean, use hardware wallets for anything material, and separate the wallet you transact from the wallet you hold. Approvals matter too — periodically review and revoke token spend approvals you no longer use, since a stale approval is a standing invitation.
We've written a full wallet hygiene walkthrough for the day-to-day mechanics; this piece is about the humans on the other end of the trade.
Where to get help
We advise on payment flows, custody design and counterparty processes for operators moving real value across the UK, Africa, SE Asia and Latin America — model-agnostic, vendor-neutral, and grounded in how deals actually go wrong. We don't tell you what to buy. We help you not get robbed doing legitimate business.
Want a second set of eyes on your on/off-ramp or OTC process before your next transfer? Book a call or get in touch and we'll walk through it with you.